i've an asp.internet-mvc site where customers can also add content and links and also the data will get held in a database. They now want a chance to upload accessories to pages and that i wanted to determine a couple of things:

I've upload code which will upload files (ebooks, images, etc) however i desired to see where i ought to be storing them. must i store them outdoors the web site directory structure ?

Can there be any file types which i should be worried about storing. I'd essentially possess a file picker about the front-end.

I've upload code which will upload files (ebooks, images, etc) however i desired to see where i ought to be storing them. must i store them outdoors the web site directory structure ?

Not essential. You could utilize the Application_Data special folder and store the road to the file within the database together with an unique identifier to ensure that you can retrieve it later. Files inside this folder aren't offered through the web server and therefore are in a roundabout way accessible. Another approach would be to keep files in to the database. SQL Server 2008's new FILESTREAM type is extremely helpful.

Can there be any file types which i should be worried about storing. I'd essentially possess a file picker about the front-end.

Not necessarily. Executables might be harmful as might contain infections but as lengthy when you are only storing them and not performing you ought to be safe.

Smartest choice would be to store in database, this makes it simpler to manage them (my estimation)